KAISJP00249931 Cyber Security Principal

Location Base: Greenwood Village, CO

Remote: Anywhere (aligned with role requirements)

Travel: None

Patient Access Building: No

This is a senior-level cybersecurity engineering role focused on SIEM (Splunk), threat detection, incident response, and vulnerability management .

The position plays a critical role in protecting enterprise infrastructure , developing cybersecurity analytics , and improving security operations through automation and data-driven insights .

Investigate and document security incidents and anomalous activity

Perform root cause analysis (RCA) for incidents

Support full incident lifecycle management

Create and manage security incidents and escalation processes

Conduct vulnerability assessments and analyses

Identify risks and recommend: Remediation strategies Mitigation controls

Remediation strategies

Mitigation controls

Analyze adversary techniques to develop defensive strategies

Administer and maintain: Splunk Enterprise / Splunk Cloud Cribl Stream (data onboarding and routing)

Splunk Enterprise / Splunk Cloud

Cribl Stream (data onboarding and routing)

Develop cybersecurity analytics and dashboards

Integrate and process data from multiple sources into SIEM

Ensure system performance, reliability, and scalability

Build and maintain metrics and reporting programs

Develop actionable insights from: Logs Security events Threat intelligence sources

Logs

Security events

Threat intelligence sources

Translate data into security recommendations

Identify and implement security program improvements

Enhance detection, monitoring, and response capabilities

Recommend system and workflow enhancements

Support large-scale Linux/Unix environments

Ensure security controls and system integrity

Validate and enhance security requirements and safeguards

Required Education: Bachelor’s degree Computer Science, IT, Cybersecurity, or related field

Computer Science, IT, Cybersecurity, or related field

Experience Requirements: 8+ years total IT or related experience 5+ years Splunk Administration experience Strong background in cybersecurity operations

8+ years total IT or related experience

5+ years Splunk Administration experience

Strong background in cybersecurity operations

Cribl Stream

Linux / Unix systems

SIEM architecture and administration

Security incident response

Vulnerability management

Threat intelligence frameworks

Security analytics and monitoring tools

Data ingestion and pipeline optimization

Splunk Certified Administrator

Cribl Certified Stream Administrator

Managing and optimizing Splunk environments

Onboarding and transforming data via Cribl

Investigating security incidents

Performing vulnerability assessments

Writing queries, dashboards, and alerts

Collaborating with security and IT teams

The ideal candidate:

Has deep expertise in Splunk and SIEM environments

Is experienced in cybersecurity operations and threat analysis

Can work independently in a high-impact, mission-critical role

Has strong analytical and troubleshooting skills

Is comfortable working with large-scale enterprise systems

Resume submission via portal

Hiring manager reviews and schedules interviews

No direct supplier outreach (DND)

Duration: Through December 31, 2026

Potential: Possible FTE conversion

Focus on enterprise security and cyber risk defense

Protects critical systems supporting millions of users

Drives enterprise cybersecurity strategy and execution

Enhances threat detection and incident response capabilities

Plays a key role in data security, compliance, and risk reduction